RE: Cisco filter question

Instead of:

set interface Null0

Use: set ip next-hop 10.255.255.254

_and_
ip route 10.255.255.254 255.255.255.255 Null0 name BLACKHOLE

Michel.

Because your acl matches echo reply and the packet is echo request.

Owen